CVE-2006-2154

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-03 · updated 2026-06-16

Description

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the File>Open dialog.

Affected products

EMC Retrospect: through 6.5; through 7.0; through 7.5

References

http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9507&r=0.7344324
http://secunia.com/advisories/19850
http://www.securityfocus.com/bid/17798
http://www.vupen.com/english/advisories/2006/1612
https://exchange.xforce.ibmcloud.com/vulnerabilities/26226
http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9507&r=0.7344324
http://secunia.com/advisories/19850
http://www.securityfocus.com/bid/17798
http://www.vupen.com/english/advisories/2006/1612
https://exchange.xforce.ibmcloud.com/vulnerabilities/26226

Get alerted when CVE-2006-2154 or the next vulnerability affects your stack